Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e5878b747529625f858ad8c2eda01db0_JaffaCakes118

  • Size

    795KB

  • Sample

    240407-wmtqcaag83

  • MD5

    e5878b747529625f858ad8c2eda01db0

  • SHA1

    358def5084cc314e7ff7510b826a4bfdb9de62e6

  • SHA256

    d2ac4ab5e249a668d290886408635152e91e9fc2cd2ff1a998fadc677396ca60

  • SHA512

    78971982d6b174e5ee8d78da77a8fa748acf46ea7a7def4ac4679c6f86fd1c49b6b3f05dbd733ee16614857758fa8b3467703b05364900448afd66a7a41a38bb

  • SSDEEP

    6144:UZfec9EbXDk6RkdKzGFrQZb++tdsHP4+QfI6UVE2EZ/UOPSe570Szp3Znmy+g4j:UZWtI6Rk2erQZb+md4w1UAyOB06u

Score
10/10

Malware Config

Targets

    • Target

      e5878b747529625f858ad8c2eda01db0_JaffaCakes118

    • Size

      795KB

    • MD5

      e5878b747529625f858ad8c2eda01db0

    • SHA1

      358def5084cc314e7ff7510b826a4bfdb9de62e6

    • SHA256

      d2ac4ab5e249a668d290886408635152e91e9fc2cd2ff1a998fadc677396ca60

    • SHA512

      78971982d6b174e5ee8d78da77a8fa748acf46ea7a7def4ac4679c6f86fd1c49b6b3f05dbd733ee16614857758fa8b3467703b05364900448afd66a7a41a38bb

    • SSDEEP

      6144:UZfec9EbXDk6RkdKzGFrQZb++tdsHP4+QfI6UVE2EZ/UOPSe570Szp3Znmy+g4j:UZWtI6Rk2erQZb+md4w1UAyOB06u

    Score
    10/10
    • Modifies visibility of file extensions in Explorer

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

    • Sets file execution options in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks